PT-2017-17733 · Novell+1 · Novell Imanager+1

Publicado 2017-05-03 · Atualizado 2017-05-15 · CVE-2017-7431

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1 NetIQ iManager versions 3.x before 3.0.3.1

Description The issue concerns persistent CSRF in object management.

Recommendations For Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1, update to 2.7 SP7 Patch 10 HF1 or later. For NetIQ iManager versions 3.x before 3.0.3.1, update to 3.0.3.1 or later.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-7431

Produtos afetados

Netiq Imanager

Novell Imanager

Referências · 8

• https://dl.netiq.com/Download?buildid=24FxpmqdThE~ · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7431 · Nota de Segurança
• https://novell.com/support/kb/doc.php?id=7010166 · Nota
• https://bugzilla.novell.com/show_bug.cgi?id=1030692 · Nota
• https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~ · Nota
• https://osv.dev/vulnerability/CVE-2017-7431 · Aviso do Fabricante
• https://netiq.com/support/kb/doc.php?id=7016795 · Nota
• https://bugzilla.novell.com/show_bug.cgi?id=1024963 · Nota